PL-900 Manage the Microsoft Power Platform environment Practice Test 3 — 15 Questions

Question 1

A company is implementing Microsoft Power Platform and needs to ensure that only licensed users can create environments. Which setting should be enabled?

Accepted Answer

Enable 'Create environments' in the Power Platform admin center tenant settings. Option C is correct because the 'Create environments' setting in the Power Platform admin center tenant settings is the specific control that restricts environment creation to licensed users only. By default, this setting is enabled for all users, but administrators can disable it to limit creation to users with a Power Platform license (e.g., Power Apps per user plan, Power Automate per user plan, or Dynamics 365 licenses). This ensures compliance with licensing requirements and prevents unlicensed users from consuming capacity.

Answer

Enable 'Create database' in the tenant settings

Answer

Enable 'Create solutions' in the Power Platform admin center

Answer

Enable 'Create apps' in the Power Platform admin center

Question 2

A Power Platform administrator needs to restrict data loss prevention (DLP) policies to prevent sensitive data from being shared with non-approved connectors. Which scope should the administrator apply?

Accepted Answer

Environment-level. Environment-level DLP policies allow administrators to apply data loss prevention rules to specific environments, ensuring that sensitive data is not shared with non-approved connectors within that environment. This granular control is necessary when different environments have different compliance requirements, such as separating development from production data flows.

Answer

Group-level

Answer

Tenant-level

Answer

User-level

Question 3

A large enterprise uses Power Platform with multiple environments. They need to enforce a policy that blocks all Canvas apps from using the 'Twitter' connector, but only in the 'Production' environment. What should the administrator do?

Accepted Answer

Create an environment-level DLP policy for the Production environment and set 'Twitter' to 'Blocked'. Option C is correct because environment-level DLP policies allow administrators to apply connector restrictions to specific environments, such as blocking the 'Twitter' connector only in 'Production' while leaving it available in other environments. This granular control is essential for enforcing governance without affecting development or testing environments.

Answer

Create a DLP policy at the tenant level and set the 'Twitter' connector to 'Blocked'

Answer

Disable the 'Twitter' connector in the Power Platform admin center for the Production environment

Answer

Use the 'Set Connector' API to disable the connector for the Production environment

Question 4

A company wants to grant a user the ability to manage environments in Power Platform, including creating and deleting environments, but without full tenant admin access. Which role should be assigned?

Accepted Answer

Environment Admin. Option A is correct because the Environment Admin role allows managing environments within the tenant. Option B is wrong because System Administrator is a Dataverse role, not for environment management. Option C is wrong because Power Platform Admin has broader tenant-level permissions. Option D is wrong because Global Admin has full access to all services.

Answer

Global Administrator

Answer

Power Platform Administrator

Answer

System Administrator

Question 5

An organization uses Power Automate flows that connect to Microsoft Dataverse. The flows need to run under a service account with specific permissions. What is the best practice to manage the connection?

Accepted Answer

Create a connection reference that uses the service account's connection. Connection references decouple the connection details from the flow definition, allowing you to configure a service account's connection once and reuse it across multiple flows. When you create a connection reference and set it to use a service account's connection (e.g., a pre-created Dataverse connection authenticated with the service account), the flow runs under that account's permissions without exposing credentials or requiring the flow owner to share their identity. This is the recommended pattern for service principal or application user scenarios in Power Automate.

Answer

Use the flow owner's credentials and share the flow with the service account

Answer

Create a service account connection type in the Power Platform admin center

Answer

Hardcode the service account credentials in the flow

Question 6

A company is migrating their Power Platform environments from one tenant to another. They need to ensure that all solution components, including Canvas apps and flows, are moved. Which tool should be used?

Accepted Answer

Configuration Migration tool. The Configuration Migration tool is the correct choice because it is specifically designed to move solution components, including Canvas apps and flows, along with their configuration data across environments or tenants. Manual export/import of solutions would not handle data dependencies, and the Power Platform CLI is more suited for automation and development tasks rather than tenant-to-tenant migrations. The Configuration Migration tool ensures that all solution artifacts and their associated data are transferred intact.

Answer

Manual export and import of solutions

Answer

Power Platform CLI

Answer

Solution Checker

Question 7

A Power Platform administrator wants to see the capacity usage of all environments in the tenant. Where should they look?

Accepted Answer

Power Platform admin center > Capacity. The Capacity page in the Power Platform admin center provides a tenant-level view of all capacity entitlements (database, file, log) and their consumption across environments. This is the dedicated location for monitoring capacity usage, including add-ons and storage overages, as documented in Microsoft's capacity management guidance.

Answer

Power Platform admin center > Environments

Answer

Power Platform admin center > Analytics

Answer

Power Platform admin center > Billing

Question 8

A company needs to ensure that all Power Apps and Power Automate flows in the 'Development' environment are automatically backed up daily. What should the administrator configure?

Accepted Answer

Enable Dataverse backups for the Development environment. Option A is correct because Dataverse backups are automatically enabled for all environments, including Development, and they occur daily without additional configuration. The Power Platform admin center provides the ability to restore these backups, but the backup itself is managed by the Dataverse service, not through a separate backup policy or manual export. This ensures that all Power Apps and Power Automate flows stored in Dataverse are protected by default.

Answer

Enable the 'Backup Policy' in the Power Platform admin center for the Development environment

Answer

Schedule a daily export of all solutions using the Power Platform admin center

Answer

Use the 'Solution Backup' feature in the Power Platform admin center

Question 9

A Power Platform administrator needs to ensure that only certain users can create Power Apps in the 'Production' environment. What is the recommended approach?

Accepted Answer

Assign a custom security role in Dataverse that excludes 'Create App' privilege for the Production environment. Option C is correct because environment security roles can be customized to restrict app creation. Option A is wrong because the DLP policy does not control who can create apps. Option B is wrong because tenant-level settings affect all environments. Option D is wrong because there is no 'Create Apps' role in Entra ID.

Answer

Create a DLP policy that blocks app creation for unauthorized users

Answer

Disable 'Create apps' in the Power Platform admin center for the tenant

Answer

Use Microsoft Entra ID to create a role that blocks 'Create Apps'

Question 10

Which TWO actions can a Power Platform administrator perform in the Power Platform admin center?

Accepted Answer

Create and delete environments. Option C is correct because the Power Platform admin center provides administrators with the ability to create and delete environments, which are isolated containers for managing apps, flows, and data. This is a core administrative function that directly controls the lifecycle of Power Platform resources.

Answer

Manage SharePoint Online site collections

Answer

Manage Exchange Online mailboxes

Answer

Manage Microsoft Entra ID roles

Question 11

Which THREE components are included in a Power Platform environment?

Accepted Answer

Dataverse database. Options A, B, and D are correct. A Power Platform environment includes Dataverse databases, Power Apps, Power Automate flows, and other components. Option C is wrong because Power BI workspaces are separate from Power Platform environments. Option E is wrong because Microsoft 365 groups are not part of a Power Platform environment.

Answer

Power BI workspaces

Answer

Microsoft 365 groups

Question 12

Which TWO roles can manage Power Platform environments at the tenant level?

Accepted Answer

Power Platform Administrator. Options A and D are correct. Power Platform Administrator and Dynamics 365 Administrator have tenant-level admin access to Power Platform. Option B is wrong because Environment Admin can only manage specific environments. Option C is wrong because System Administrator is a Dataverse role, not tenant-level. Option E is wrong because Global Admin has too broad access but is not specifically a Power Platform role.

Answer

Environment Admin

Answer

System Administrator

Answer

Global Administrator

Question 13

The exhibit shows a JSON snippet from a Power Platform environment configuration. What can be inferred from this snippet?

Accepted Answer

The environment has blocked connectors for Twitter and Facebook. The JSON snippet includes a 'blockedConnectors' array containing 'Twitter' and 'Facebook', which explicitly indicates that these connectors are prohibited in the environment. This is a tenant-level or environment-level policy setting used to restrict data movement to or from these services, directly supporting option A as correct.

Answer

The environment has used 1024 MB of storage

Answer

The environment is named 'Production'

Answer

The environment has a storage limit of 512 MB

Question 14

The exhibit shows a DLP policy configuration for a Power Platform environment. Which connector is allowed for business use?

Accepted Answer

SharePoint. SharePoint is classified as 'Business' in the DLP policy because it is a Microsoft-owned enterprise service that supports data loss prevention (DLP) actions like blocking, monitoring, or restricting data flow. The exhibit shows SharePoint under the 'Business' data group, meaning it is allowed for business use without triggering policy violations. In contrast, Outlook, Twitter, and Facebook are placed in the 'Non-Business' group, which blocks their connectors from being used in apps and flows within this environment.

Answer

Outlook

Answer

Twitter

Answer

Facebook

Question 15

The exhibit shows a PowerShell command and its output. What does the EnvironmentState value indicate?

Accepted Answer

The environment is active and can be used. The EnvironmentState value 'Ready' indicates that the environment is fully provisioned, active, and available for use. In the Power Platform admin center and PowerShell cmdlets like Get-AdminPowerAppEnvironment, 'Ready' is the standard status for a healthy environment that can host apps, flows, and other resources.

Answer

The environment is pending creation

Answer

The environment is disabled

Answer

The environment has a provisioning error